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(54) Inertial rate sensor and method with built-in testing 



(57) Inertial rate sensor and method in which in 
which a single output terminal is utilized for delivering a 
rate output signal during normal operation, interfacing 
with an external computer during a programming mode, 
and for providing a warning in the event of a failure. Ac- 
cess to the programming mode is permitted only when 



a predetermined sequence of conditions is met, and ac- 
cidental initiation of the programming mode is virtually 
impossible. Compensation data is stored redundantly at 
two locations in an internal memory, and the data is read 
from both locations and compared to verify its validity. 
Signals are monitored at different points to detect the 
occurrence of failures. 
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Description 

[0001] This invention pertains generally to inertial rate 
sensors and, more particularly, to an inertial rate sensor 
and method with buift-in testing. 

[0002] Inertial rate sensors are used in a wide variety 
of applications including aircraft navigation, the guid- 
ance of missiles and spacecraft, and automotive stabil- 
ity control systems. In many of these applications, safety 
is critical, and measures must be taken to guard against 
failures of the sensor. 

[0003] It is in general an object of the invention to pro- 
vide a new and improved inertial rate sensor and meth- 
od. 

[0004] Another object of the invention is to provide an 
inertial rate sensor and method with improved built-in 
testing. 

[0005] These and other objects are achieved in ac- 
cordance with the invention by providing an inertial rate 
sensor and method in which a single output terminal is 
utilized for delivering a rate output signal during normal 
operation, interfacing with an external computer during 
a programming mode, and for providing a warning in the 
event of a failure. Access to the programming mode is 
permitted only when a predetermined sequence of con- 
ditions is met, and accidental initiation of the program- 
ming mode is virtually impossible. Compensation data 
is stored redundantly at two locations in an internal 
memory, and the data is read from both locations and 
compared to verify its validity. Signals are monitored at 
different points to detect the occurrence of failures. 
[0006] Figure 1 is a block diagram of one embodiment 
of an inertial rate sensor incorporating the invention. 
[0007] Figure 2 is block diagram of the drive oscillator 
in the embodiment of Figure 1 . 

[0008] Figure 3 is a block diagram of the clock filter in 
the embodiment of Figure 1 . 

[0009] Figure 4 is a timing diagram illustrating the 
waveforms at different points in the clock filter of Figure 
3. 

[0010] Figure 5 is a block diagram of the reset circuit 
in the embodiment of Figure 1 . 

[0011] Figure 6 is a timing diagram illustrating the 
waveforms at different points in the reset circuit of Figure 
5. 

[0012] Figure 7 is a block diagram of an analog-to- 
digital converter in the embodiment of Figure 1. 
[0013] Figure 8 is a memory definition table for the 
EEPROM in the embodiment of Figure 1. 
[0014] Figure 9 is a memory map showing one possi- 
ble allocation of memory locations within the EEPROM. 
[0015] Figure 10 is a block diagram illustrating the 
manner in which the EEPROM is programmed. 
[001 6] Figure 1 1 is a circuit diagram of a portion of the 
output amplifier in the embodiment of Figure 1 . 
[001 7] Figure 1 2 is a truth table for the output amplifier 
of Figure 11. 

[0018] As illustrated in Figure 1. the rate sensor in- 



cludes a quartz sensing element 1 1 in the form of a dou- 
ble-ended tuning fork. This tuning fork is fabricated of 
single crystal quartz material, and has an H-shaped con- 
figuration, with drive tines 12 at one end and pick-up 
5 tines 1 3 at the other. Each pair of tines is disposed sym- 
metrically about the longitudinal axis 14 of the tuning 
fork. 

[001 9] The drive tines are driven to oscillate at the nat- 
ural frequency of the tuning fork and in the plane of the 
tuning fork. When the tuning fork is subjected to rotation 
about its longitudinal axis, the Coriolis force causes the 
tines to deflect out of the plane of the fork, stimulating 
the pickup mode of oscillation. The drive and pickup sig- 
nals are coupled to the tines in a conventional manner 
by the use of electrodes (not shown), with the drive sig- 
nals stimulating piezoelectric vibration of the tines and 
the pickup signals being in the form of electric charge 
generated piezoelectrically in response to strain pro- 
duced by the Coriolis force. 

[0020] Although the sensing element is illustrated as 
being a double ended tuning fork, another type of vibra- 
tory sensing element, including a single ended tuning 
fork, can also be utilized, if desired. 
[0021 ] The pickup signals pass through a charge am- 
plifier 1 6, to a preamplifier 17, and then to a demodulator 
18. The signals from the demodulator pass through a 
low pass filter 19 and a bias cancellation circuit 20 to a 
compensation summer 21 and then to an output ampli- 
fier 22, with the rate output signal appearing at the out- 
put of the output amplifier. With voltage inputs of +5 volts 
and 0 volts, the rate output is biased to +2.5 volts for 
zero input and swings to a more positive voltage for pos- 
itive rate inputs and toward zero volts for a negative rate 
input. The +2.5 volt level is referred to as virtual ground. 
[0022] Compensation signals are applied to the sum- 
mer from sample and hold circuits 23 to adjust the output 
signal for factors such as temperature and to make the 
system ratiometric so that the scale factor of the unit 
varies in direct proportion to the applied power, as de- 
scribed in U.S. Patent 5,942,686. 
[0023] The system includes digital logic 24 which op- 
erates in conjunction with an external EEPROM 26 
whereby the unit can be calibrated electronically without 
the need for hand-soldered components. The digital log- 
ic also provides a built-in test function for detecting the 
occurrence of faults in the unit. Signals from the digital 
logic are applied to compensation summer 21 through 
sample and hold circuits 23 and to output amplifier 22. 
[0024] The vibratory sensing element or tuning fork 
11 is used as the clock reference for the digital logic, 
with clock signals derived from the drive circuit or oscil- 
lator 28 being applied to the digital logic through a clock 
filter 29. This reduces the size and cost of the rate sen- 
sor by eliminating the need for an external clock and 
thereby reducing the overall part count and circuit board 
area. It also simplifies the task of fault detection since 
monitoring tuning fork integrity automatically monitors 
the integrity of the clock signal. In addition, the clock sig- 
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nal is synchronous with the output signal, and there can 
be no aliased signals or beat tones at sum and differ- 
ence frequencies. 

[0025] In the preferred embodiment, the fundamental 
frequency of the tuning fork is used as the clock refer- 
ence for the digital logic. Alternatively, a phase-locked 
loop can be utilized to generate a multiple of the fork 
drive frequency for faster signal processing. In either 
case, the frequency determining element is the same 
tuning fork that serves as the sensing element. 
[0026] As illustrated in Figure 2, the drive circuit or os- 
cillator 28 comprises a loop which is sometimes referred 
to as an AGC (automatic gain control) servo loop. When 
the drive tines are oscillating, a current is generated 
across the drive electrodes. This current is passed 
through a current-to-voltage amplifier 31 to produce a 
voltage which is applied to the input of a demodulator 32. 
That voltage is sometimes referred to as the IX signal. 
A voltage comparator 33 connected to the output of the 
current-to-voltage amplifier produces a square wave at 
the drive frequency. This square wave is applied to the 
control input of the demodulator, and with the demodu- 
lator operating at the drive frequency, its output includes 
a term at dc. 

[0027] The dc term from the demodulator is applied 
to a summing circuit 34 where it is combined with a fixed 
scale factor reference voltage 36 and a programmable 
scale factor reference voltage 37. The output of the sum- 
ming circuit is connected to the input of an integrator 38. 
[0028] The output of the integrator will move either to- 
ward a more positive voltage or toward a more negative 
voltage if its input is non-zero. This means that in a 
steady state condition, the input to the integrator must, 
on average, be zero. Thus, the output of the demodula- 
tor must exactly cancel the sum of the two scale factor 
reference voltages. Since the output voltage of the de- 
modulator represents the amplitude of oscillation of the 
drive mode of the tuning fork, the two scale factor refer- 
ence voltages set the magnitude of the drive mode os- 
cillation. 

[0029] The rate sensing capability of the tuning fork 
depends on the Coriolis force which couples input rota- 
tion about the axis of symmetry of the drive tines to an 
out-of-plane torsional mode. The Coriolis force is pro- 
portional to the product of the rate of rotation and the 
velocity of the tines, and that velocity is proportional to 
the amplitude of the tine oscillation. Thus, as the tines 
are driven to oscillate with a greater amplitude of dis- 
placement and velocity, the response to rotation via the 
Coriolis force will be proportionally greater. 
[0030] Thus, the scale factor, or response per unit ro- 
tation of the tuning fork, increases proportionally with 
the drive amplitude. 

[0031] In determining the amplitude of oscillation of 
the drive mode of the tuning fork, scale factor reference 
voltages 36, 37 also determine the scale factor of the 
device. The fixed voltage is used to set the nominal 
scale factor, and the programmable voltage is used for 



fine adjustment. This permits the scale factor of each 
unit to be corrected for minor variations in individual tun- 
ing fork characteristics so that each rate sensor pro- 
duced can have the proper scale factor output. 
5 [0032] The programmable data for setting the pro- 
grammable scale factor reference voltage is derived 
from a digital coefficient stored in EEPROM 26 and ac- 
cessed by digital logic 24. That data is converted to an 
analog voltage which is applied to the programmable bi- 
as voltage input of summing circuit 34. In one presently 
preferred embodiment, the range of adjustment of the 
programmable component of the scale factor reference 
is on the order of ±35 percent of the fixed component. 
[0033] The voltage level at the output of integrator 38 
is monitored by a window comparator 39 which detects 
unacceptable conditions or failures in the drive loop. The 
window comparator comprises a pair of comparators 41 , 
42 and an inverting OR gate 43, with the outputs of the 
comparators being connected to the inputs of the invert- 
ing OR gate. The upper and lower voltage limits are set 
by reference voltages +REF and -REF which define the 
trip points of the circuit. The other two comparator inputs 
are connected together for receiving the signal from the 
integrator. The output of the inverting OR gate is passed 
through a low pass filter 44 and monitored by the built- 
in test logic. 

[0034] As long as the output of the integrator is within 
the limits set by reference voltages, the output of the 
window comparator will be determined to be acceptable 
by the built-in test logic 46. If at any time the output of 
the integrator should fall outside these limits, the test 
logic will detect a failure and trigger output stage 22 to 
shift rapidly to the positive voltage rail, which is inter- 
preted as a failure condition. 

[0035] The types of failures which can be detected 
within the oscillator loop include a defective or broken 
tuning fork, an open electrical trace leading to or from 
the fork, a change in the fork mode "Q" factor caused 
by a leak in the backfill gas of the package in which the 
tuning fork is encapsulated, and a shorted or open feed- 
back component across the integrator. 
[0036] To permit failures of the integrator to be detect- 
ed by the built-in test logic, the output of the integrator 
is combined with a bias voltage 48 in a summing circuit 
49 to move the steady state output of the integrator away 
from virtual ground, i.e. the midpoint between the posi- 
tive and negative supply voltages, to a desired value. 
This is necessary because if the feedback path across 
the integrator becomes shorted, the output of the inte- 
grator will remain at virtual ground, i.e. +2.5 volts for a 
system with supply voltages of +5 volts and 0 volts. In 
order to detect this failure, the acceptable range of inte- 
grator output voltages must be biased away from virtual 
ground, typically to a range of about +2.6 volts to +4.0 
volts for normal operating conditions. 
[0037] If the feedback path across the integrator be- 
comes open, the integrator amplifier will pass all the 
double frequency components created by the demodu- 
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lator. This double-frequency signal, when passed 
through the window comparator, will result in a stream 
of digital "ones" and "zeros" as the amplifier output tran- 
sitions through the trip limits. Low pass filter 44 reduces 
this pulse stream to a dc voltage which is detected by 
the built-in test logic as a failure. 

[0038] The output of summing circuit 49 is amplified 
by an amplifier 51 and applied to an amplitude modula- 
tor 52 to modulate the output voltage from voltage com- 
parator 33. The output of the voltage comparator is a 
rail-to-rail square wave, and the modulator adjusts the 
peak-to-peak amplitude of that square wave to provide 
a variable drive voltage for the drive tines of the tuning 
fork. 

[0039] The square wave from the modulator is applied 
to the drive tines through a multiplexer 53 which is con- 
trolled by a signal from the logic circuitry. It is also ap- 
plied to the input of a bandpass filter 54 with a gain of 
1 .0 at its center frequency which is approximately equal 
to the natural frequency of the drive mode of the tuning 
fork. This filter significantly attenuates the harmonic 
content of the square wave, and produces another drive 
signal which is nearly a pure sine wave. That signal is 
applied to a second input of the multiplexer. 
[0040] The peak-to-peak voltage of the square wave 
drive signal rises more rapidly and results in a faster 
turn-on than the sine wave, and is applied to the drive 
tines during the initial phase of turn-on to minimize turn- 
on time. Once the amplitude of the tuning fork oscilla- 
tions reaches a level such that the output of integrator 
38 exceeds the lower control limit of window comparator 
39, the built-in test logic generates a command signal 
to the multiplexer to switch its output from the square 
wave to the sine wave. The relatively harmonic-free sine 
wave is then used to drive the tuning fork for the remain- 
der of its operation until the next turn-on sequence. 
[0041] This provides the advantages of both types of 
drive signals without the disadvantages of either. The 
square wave provides more rapid onset of fork oscilla- 
tion and stabilization at the amplitude control level. How- 
ever, it also has a high harmonic content which can, in 
some instances, couple to higher order modes of the 
tuning fork structure and cause undesired bias shifts in 
the sensor output. The sine wave is relatively free of 
such harmonics, but it rises more slowly and results in 
a slower turn-on than the square wave, and therefore is 
not as good for start-up operation. 
[0042] It is important for the clock reference to be gen- 
erated in such a way that it has a fixed phase relation- 
ship with respect to the phase of the tuning fork motion. 
If that phase relationship were to vary from one turn-on 
to the next, the logic would still function properly, but the 
difference in phase would likely result in differences in 
the bias offset of the sensor due to finite coupling of the 
clock signal into the output signal path. A fixed clock 
phase relationship ensures that if this coupling exists, it 
will have a fixed value from turn-on to turn-on. 
[0043] The fixed phase relationship is provided by the 



clock filter 29 through which the clock signals are ap- 
plied to the logic circuitry. As illustrated in Figure 3, the 
clock filter comprises a pair of D-type flip-flops 56, .57 
that are reset simultaneously to clear their outputs, des- 

5 ignated QA and QB, respectively. These flip-flops trigger 
on positive-going clock edges, and the input clock signal 
is derived from the output of voltage comparator 33, with 
non-inverted clock input signal being applied to flip-flop 
56 and the inverted clock input signal being applied to 

10 flip-flop 57 through an inverter 58. 

[0044] A feedback loop comprising an integrator 59, 
a Schmitt trigger 60 and an inverter 61 is connected be- 
tween the Q output and the D input of flip-flop 57. This 
causes clock input to be divided by 2 so that the signal 

15 qb at the output of flip-flop 57 is a square wave with a 
frequency equal to exactly one half that of the clock in- 
put. 

[0045] Flip-flop 56 is slaved to flip-flop 57, with the de- 
layed QB output signal from flip-flop 57 being applied to 

20 the D input of flip-flop 56 through an inverter 62. Thus, 
the signal QA at the output of flip-flop 56 is also a square 
wave with a frequency equal to exactly one half that of 
the clock input, and the outputs of the two flip-flops are 
always out-of-phase with each other by one-half of the 

25 input clock cycle. 

[0046] The integrator and Schmitt trigger introduce a 
delay into the feedback which prevents multiple transi- 
tions from occurring in the clock output signal in the 
event that such transitions are present in the input clock 

30 signal. The delay prevents the flip-flops from making ad- 
ditional transitions for a fixed period of time after an in- 
itial transition at a first positive-going clock edge. This 
delay is illustrated in Figure 4, and is on the order of 10 
to 25 percent of the clock period. Inhibiting the flip-flops 

35 in this manner provides a clean output signal from a 
clock input which may contain multiple transitions within 
a short period after an initial transition. Such transitions 
can, for example, arise from an element such as a com- 
parator which is utilized in the generation of the clock 

to input, and they can occur throughout the operation of 
the sensor, not just at start-up. 

[0047] The outputs QA and QB of flip-flops 56, 57, 
which are free of spurious transitions, are input to an 
exclusive-OR gate 63. Since these two signals are both 

45 at one-half the frequency of the clock input signal, they 
combine to produce a new clock signal at the same fre- 
quency as the clock input signal. Since the two flip-flops 
are slaved together and their QA and QB outputs are 
always out-of-phase with each other by one-half of the 

50 input clock cycle, the phase of the output clock signal 
from the filter always has a fixed relationship with re- 
spect to the clock signal input to the filter. This phase 
relationship is illustrated in Figure 4. 
[0048] Figure 5 illustrates a reset circuit 64 which pre- 

55 vents an incorrect clock signal from being derived from 
a spurious oscillation occurring between the moment 
that power is applied to the sensor and the onset of suf- 
ficient fork drive oscillation. This circuit includes a pre- 
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cision oscillator 66 comprising a voltage comparator 67 
with a resistor 68 and a capacitor 69 which determine 
the frequency of the oscillator. This frequency is signif- 
icantly lower than the system clock frequency, and in 
one presently preferred embodiment, the system clock 
has a frequency of 10 KHz, and oscillator 66 operates 
at a frequency of 1 Khz. 

[0049] As illustrated in Figure 6, a finite time is re- 
quired for the drive oscillator signal 71 to transition from 
some indeterminate frequency to its normal operating 
frequency. Waveform 72 illustrates the gradual rise in 
input voltage as the power is applied. When the input 
voltage reaches a threshold level, typically about 3.8 
volts, a power-on reset pulse 73 is generated to provide 
the initial reset for the logic circuits. 
[0050] The output of oscillator 66 is connected to the 
input of a 9-bit (divide-by-512) counter 74. The output 
of this counter is fed to control logic 77 which also re- 
ceives an asynchronous reset signal from power-on re- 
set circuit 78. Upon receipt of the signal from counter 
74, the control logic toggles a comparator enable signal 
79 to shut off voltage comparator 67, which then ceases 
to oscillate until another power-on reset occurs. The 
control logic also enables a reset pulse synchronizer 81 
which delivers a synchronous reset signal that is syn- 
chronized with the clock signal from clock filter 29 which 
is known to be valid. The synchronous reset signal is 
combined with the asynchronous reset signal in an OR 
gate 82 to provide the system reset signal 83. As illus- 
trated in Figure 6, this signal transitions to a low state 
and then back to a high state in synchronization with the 
main system clock. Delaying delivery of the reset signal 
in this manner ensures that a final reset is given to all 
digital logic circuits after a clock which is known to be 
valid is derived from the tuning fork. 
[0051] The control logic performs its function within 
two cycles of the signal from oscillator 66, yielding a total 
of 514 cycles for the operation of that oscillator, at which 
point it is fully disabled. 

[0052] The lower two waveforms show the system 
clock and the system reset signal on an expanded scale. 
As illustrated by these two waveforms, the negative-go- 
ing transition of the system reset signal can be asyn- 
chronous to the system clock, and can occur several 
clock cycles prior to the positive-going transition, but the 
positive-going transition is synchronized to the system 
clock. 

[0053] This reset circuit initializes the digital logic 
when power is applied to the sensor. Until that timing 
sequence is complete, the built-in test logic holds the 
signal from output stage 22 at the positive rail voltage. 
Thereafter, the output is allowed to assume the value 
corresponding to the rate of rotation of the sensor. When 
the output comes off the rail, it serves as an indication 
that the sensor is ready to use and will give valid data. 
The output will then return to the positive rail only if a 
failure is detected. 

[0054] When a failure is detected and the output 



moves to the positive voltage rail, a BIT flag is latched 
and remains latched until another power turn-on se- 
quence occurs. However, this latching of the BIT flag is 
inhibited prior to the completion of the turn-on sequence 
5 so that the transient conditions during start-up will not 
leave the BIT flag latched. 

[0055] If the power applied to the unit should ever drop 
below the threshold of the power-on reset circuit, that 
circuit will automatically be re-triggered. That re-trigger- 
ing provides an indication that a loss of power has oc- 
curred. 

[0056] As illustrated in Figures 1 and 7, the system 
includes a built-in temperature sensor 86 which pro- 
vides an analog signal that is converted to digital form 
in an analog-to-digital converter (ADC) 87 comprising a 
voltage comparator 88. The analog temperature signal 
is combined with a reference voltage at a summing junc- 
tion 89 so that it will be at mid-scale in the ADC at room 
temperature (300°K). The adjusted temperature signal 
from the summing junction is passed through an ampli- 
fier 91 and applied to the input of voltage comparator 
88. The output of the comparator is high for signals 
above virtual ground and low for signals below virtual 
ground. 

[0057] The signal from comparator 88 is applied to 
successive approximation logic 92 which provides an 
8-bit digital word corresponding to temperature. That 
signal is applied to a digital-to-analog converter (DAC) 
93, the output of which is connected to one of the sample 
and hold circuits 23. The output voltage from the sample 
and hold circuit is applied to summing junction 89 as a 
feedback signal. With successive cycles of the succes- 
sive approximation logic, the feedback voltage ap- 
proaches a level equal to the sum of the other two input 
voltages, reaching a level quite close to that sum in the 
eighth cycle. 

[0058] The output of the successive approximation 
logic thus converges on an 8-bit word which corre- 
sponds to the analog temperature. The logic circuits 
convert that word to an EEPROM address which is used 
in the retrieval of temperature compensation data. 
[0059] Combining the feedback signal with the tem- 
perature sensor signal at summing junction 89 provides 
a signal corresponding to the residual error from the 
conversion process. That error should be no more than 
about one-half of the value of the least significant bit in 
the 8-bit word. 

[0060] The residual error signal is monitored by a win- 
dow comparator 94 to make verify that the error is within 
acceptable limits. That window comparator is similar to 
window comparator 39, and it comprises a pair of com- 
parators 96, 97 and an inverting OR gate 98, with the 
outputs of the comparators being connected to the in- 
puts of the inverting OR gate. The signal from amplifier 
91 is applied to one input of each of the comparators. 
Reference voltages +REF and -REF applied to the com- 
parators set upper and lower reference limits corre- 
sponding to range of acceptable residual errors in the 
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A/D conversion process. In the event of a failure in that 
process, the residual error will exceed the limits set by 
the reference voltages, and the inverting OR gate will 
provide an output signal which is high. 
[0061] After completing the eight cycles of conver- 
sion, the successive approximation logic generates an 
END OF CONVERSION pulse. That pulse and the out- 
put signal from the window comparator are applied to 
an AND gate 99. The output of the AND gate is applied 
to the built-in test (BIT) logic 46 in digital logic 24. If the 
output of the window comparator is high when the END 
OF CONVERSION pulse is generated, the AND gate 
will deliver a high output pulse which the test logic inter- 
prets as a BIT failure. It then delivers a BIT command 
to output stage 22 to drive the output signal to the pos- 
itive voltage rail which indicates a failure. 
[0062] In order to eliminate the possibility of "nui- 
sance" BIT failure commands, the BIT logic looks for 
eight consecutive conversion failures before generating 
a BIT failure command. If fewer than eight failed con- 
versions occur, the BIT logic is not triggered, and the 
previous valid conversion data is left unchanged until 
another valid conversion is completed. If eight or more 
successive conversions fail, the BIT command is deliv- 
ered to indicate that a failure has occurred. 
[0063] The digital compensation data produced by the 
A/D conversion is processed by digital logic 24 to locate 
the appropriate pointer address within EEPROM 26 to 
access the correct output bias compensation value cor- 
responding to the current temperature. The logic then 
reads the bias value to use from the EEPROM and up- 
dates the compensation at the output of the sensor. 
[0064] Alternatively, instead of using this look-up table 
approach, coefficients could be stored within the EEP- 
ROM for conversion to compensation values by the use 
of arithmetic within the logic circuits of the system or by 
an ancillary processor, with the bias offset being approx- 
imated by a polynomial. 

[0065] The compensation updates occur relatively 
rapidly, at roughly the drive frequency divided by 80, 
which generally means that the updates will occur at a 
rate faster than 120 Hz. This is much faster than any 
significant change in output bias caused by variations 
in temperature. For that reason, allowing up to seven 
failed conversion cycles to occur without updating the 
output compensation causes no appreciable effect on 
the accuracy of the output compensation. 
[0066] Digital-to-analog converter (DAC) 93 is also 
employed in the conversion of compensation signals 
from a number of other sources. As illustrated in Figure 
1 , the DAC is multiplexed between the different sources 
by an input multiplexer 101. The output of the DAC is 
delivered to different ones of the sample and hold cir- 
cuits 23 by an output multiplexer 1 02. In the embodiment 
illustrated, the compensation signals include a constant 
bias offset reference, the ratiometric bias reference, the 
ADC successive approximation logic output, and the 
drive oscillator AGC loop reference which is used to set 



the system scale factor. The data for all of these refer- 
ences is stored in EEPROM 26 and accessed by digital 
logic 24. The analog signals from the sample and hold 
circuits are applied to compensation summer 21, sum- 
5 ming junction 34 at the input to the AGC loop integrator, 
and the summing junction 89 in analog-to-digital con- 
verter (ADC) 87. 

[0067] From the foregoing, it will be noted that digital- 
to-analog converter (DAC) 93 is an integral element in 
10 the analog-to-digital (A/D) conversion process. Hence, 
by confirming a valid ADC output, the functionality of the 
DAC is also verified. Thus, the integrity of the other DAC 
functions is also assured. 

[0068] Means is also included for verifying the validity 
15 of data in EEPROM 26. This is important because the 
values stored in the EEPROM are used continuously to 
compensate the output of the sensor in accordance with 
temperature. Some of the memory locations in the EEP- 
ROM are used for storing manufacturing data. 
20 [0069] The temperature compensation data is stored 
at specific address locations in the EEPROM, with the 
difference in temperature for successive compensation 
values typically being on the order of about 1°C. As part 
of validating the compensation data to be retrieved, the 
25 logic ensures that the requested address is within the 
acceptable bounds of the EEPROM address limits and 
that it is not within the range of addresses reserved for 
manufacturing data. 

[0070] At the time of factory calibration, any memory 
30 locations which do not correspond to valid calibration 
data are filled with a digital word corresponding to 8 
ones, i.e. 11111111 in binary notation or FF in hexadec- 
imal notation. The logic interprets all ones as illegal data, 
and if any of the memory locations containing such data 
35 are accessed, the logic will automatically flag a BIT fail- 
ure. 

[0071] Redundant data storage is employed in order 
to guard against a failure of the EEPROM memory. The 
8-bit binary word for each compensation value is stored 
40 in two memory locations, and when data is accessed 
from the EEPROM, the data from both locations is read 
and compared to ensure that no corruption of data has 
occurred. 

[0072] Valid data is recognized in two ways — iden- 
45 tical and complementary. If the two 8-bit words are iden- 
tical, the compensation value is interpreted by the digital 
logic as being valid and as having a positive sign, if the 
two words are complementary, the compensation value 
is interpreted as being valid and as having a negative 
so sign. This not only checks the integrity of the data, but 
also provides an extra bit of data precision in the sign bit. 
[0073] The sign bit is implemented by selecting one 
of two possible reference voltages for use by the digital- 
to-analog converter (DAC) in the conversion of the bias 
55 compensation values. A positive (greater than virtual 
ground) DAC reference is used when the sign bit is pos- 
itive, and a negative (less than virtual ground) DAC ref- 
erence is used when the sign bit is negative. 
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[0074] A memory definition table is illustrated in Fig- 
ure 8. In this table, the two redundant locations for stor- 
ing each of the compensation values are found in the 
Primary Byte and Secondary Byte columns. The first 
row contains a valid pair of data values (11110000B and 
1 11 10000B) which are interpreted by the digital logic as 
a positive number because they are identical. The sec- 
ond row contains a valid pair of data values (1111 0000B 
and 00001111 B) which are interpreted as a negative 
number because they are complementary. 
[0075] The third row contains values (11111111B and 
11111111 B) which are interpreted as being invalid be- 
cause they denote memory locations that are not used 
for compensation data and should not be addressed by 
the digital logic in proper operation. 
[0076] The fourth row illustrates an example of data 
which is invalid because it is corrupt. These two values 
(11110000B and 11110001 B) are neither identical nor 
complementary, and they are rejected by the digital log- 
ic, with a BIT failure being indicated in the output. 
[0077] Four lines carry signals between digital logic 
24 and EEPROM 26. The CS line carries chip select sig- 
nals which enable data exchange with the EEPROM. 
The CLK line carries the system clock, and the DIN and 
DOUT lines carry data in and data out, respectively. 
[0078] A memory map showing one possible alloca- 
tion of memory locations within EEPROM 26 is illustrat- 
ed in Figure 9. This map shows the allowable addresses 
partitioned between manufacturing data, fixed values 
such as scale factor and constant bias, and temperature 
data for ratiometric bias compensation. Address loca- 
tions are specified in standard hexadecimal notation, 
with "XX" referring to arbitrary, unspecified numbers. In 
this example, scale factor data is stored at 00H - 01 H, 
constant bias data is stored at 02h - 03H, manufacturing 
data is stored at 1 0H - 1FH, 20H - 2FH and 30H - 3FH, 
and ratiometric bias compensation data is stored at40H 
-4FH and 1FOH-1FFH. 

[0079] In order for EEPROM 26 to have the proper 
data for a particular sensor, this data must be input to 
the EEPROM in the factory at the time of calibration. 
Unlike prior art devices, this does not require additional 
input/output pins to interface with the logic and/or the 
EEPROM. Only the +5 volt, ground (0 volts) and rate 
output pins are required, with all external interfacing be- 
ing done through the rate output pin or terminal. 
[0080] Figure 1 0 illustrates the manner in which EEP- 
ROM 26 is programmed. In order to obtain access to the 
programming mode at the time of factory calibration, 
and to prevent access at other times, a special se- 
quence of events is required in order. First, the power 
line must be raised to a specified level above the normal 
operating voltage (e.g. to a level between 6.5 and 7.6 
volts). This increase is detected by a program detect cir- 
cuit 103 which comprises a window comparator similar 
window comparators 39 and 94. In order to prevent an 
instantaneous power glitch from triggering a program- 
ming sequence, the supply voltage must remain be- 



tween the two reference voltage levels for a minimum 
number of clock cycles (typically 16), as determined by 
a digital delay circuit 104, before the programming can 
be accessed. In order to further prevent accidental entry 
5 into the programming mode, the supply voltage is also 
required to remain between the two reference voltage 
levels throughout that mode. 

[0081] At the end of the delay period, a tri-state com- 
mand is sent to the rate output amplifier 22 to switch that 
amplifier from normal operation to a tri-state mode which 
enables bidirectional digital data flow between an exter- 
nal programming computer 105 and digital logic 24 and 
EEPROM 26. 

[0082] As a further precaution, a proper authorization 
code must be sent by the external computer before ac- 
cess to the programming mode is permitted, and an ad- 
ditional authorization code must be supplied to the EEP- 
ROM to initiate a read or write sequence. There are 
three possible interactive modes (temperature read, 
EEPROM read and EEPROM write), and there is a sep- 
arate authorization code for each. The first two modes 
are read only modes in that during temperature read 
mode, data passes from the sensor to the interrogating 
computer, and during the EEPROM read mode data 
passes from the EEPROM to the computer. The third 
mode is a write mode in which the computer writes data 
into the EEPROM. Except in the temperature read 
mode, the data must pass from the digital logic to the 
EEPROM, and a proper authentication code is required 
for each operation. In addition to the unique code which 
the sensor requires, the EEPROM has its own required 
code which also must be supplied in order to gain ac- 
cess to it. 

[0083] As illustrated in Figure 10, logic 24 includes 
functional mode decode logic 1 06 and EEPROM I/O log- 
ic 107. The programming computer is connected to the 
rate output pin, and data passes to and from the EEP- 
ROM using a standard RS-232 serial protocol. 
[0084] At the end of the programming sequence, the 
power line is returned to its normal level, thereby shut- 
ting off any further access to the EEPROM from the out- 
side world unless the sequence for entering the pro- 
gramming mode is repeated. 

[0085] Any unintentional entry into the programming 
mode is virtually impossible. First, the required increase 
in input power is very unlikely to occur in normal use. 
Second, unique digital codes are required in order to ac- 
cess the EEPROM through the rate output pin. Moreo- 
ver, even if the programming mode were entered by ac- 
cident, the rate output would undergo a large, rapid shift 
in voltage which would indicate that a failure has oc- 
curred and that the sensor output is no longer valid. 
[0086] In the event that the data line DOUT between 
the logic circuits and the EEPROM should become 
open, a pull-up circuit will cause ones to appear in all 
eight bits on that line. This FF or 1 1 1 1 1 1 1 1 word is inter- 
preted as invalid data, and the open line is detected as 
a failure condition. 
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[0087] As illustrated in Figure 11, output amplifier 22 
receives control inputs (labeled A, 8 and C) from the 
control logic which determine the mode of operation for 
the amplifier. A truth table for these modes is provided 
in Figure 12. As the two figures illustrate, for normal op- 
eration, input A is high while inputs B and C are both 
low. In this mode, the rate output pin provides valid ro- 
tation rate information. When the A, B and C inputs are 
all high, the BIT mode is flagged, and the output of the 
stage is pulled to the positive voltage rail. When the B 
input is high and the A and C inputs are both low, the tri- 
state programming mode is activated, 
[0088] The inputs shown in Figure 11 as coming from 
preamp A and preamp B come from earlier stages of the 
output amplifier, and the bias input shown in this figure 
is a biasing voltage which is applied only to the transis- 
tors in this section of the amplifier. The point in the circuit 
labeled "V 0 " is the rate output terminal or node. 
[0089] In a preferred embodiment, the circuitry for the 
sensor is constructed in integrated form as an applica- 
tion specific integrated circuit (ASIC). The tuning fork 
and the EEPROM are external to the ASIC, and com- 
pensation values can be loaded via computer interface 
into the EEPROM through the digital logic in the ASIC. 
In one presently preferred embodiment, the ASIC has 
only three connector terminals: +5 volts, ground (0 
volts), and the output signal. 

[0090] As illustrated in Figure 1 , proper operation of 
the sensor is further ensured by coupling an attenuated 
version of the fork drive signal to the pickup tines and 
monitoring the response of stages in the rate signal path 
to that signal. 

[0091] In that regard, the low level IX signal from cur- 
rent-to-voltage converter 31 is added to the virtual 
ground voltage at a summing node 109 and coupled to 
the pickup tines. The extra fork output produced by this 
signal acts as a large ac bias prior to demodulator 1 8 
and as a large dc bias following the demodulator. This 
bias passes through low pass filter and is then cancelled 
by a cancellation term in cancellation circuit 20. 
[0092] If the tuning fork and the elements in the rate 
signal path are functioning properly, the cancellation 
term will exactly cancel the bias at the output of the low 
pass filter. If any of those elements should fail, the bias 
at the output of the filter will not be equal and opposite 
to the cancellation term, and a shift in the output will oc- 
cur. That shift is interpreted as a BIT failure. This method 
of detecting failures in the rate signal path is described 
in greater detail in U.S. Patent 5,426,970. 
[0093] The invention has a number of important fea- 
tures and advantages. AH of the functional aspects of 
the sensor are continuously monitored to ensure that the 
output data is valid. This is of paramount importance 
where the rate sensor is used for safety applications, as 
in the stabilization of automobiles, e.g. anti-skid sys- 
tems. By using only the rate output pin for bidirectional 
data flow, the need for additional lines for external pro- 
gramming is avoided. Access to the programming mode 



is limited, and accidental entry into that mode is virtually 
impossible. The use of the rate output pin to signal fail- 
ures avoids the need to use and additional line or pin for 
that purpose. 

5 [0094] It is apparent from the foregoing that a new and 
improved inertial rate sensor and method have been 
provided. While only certain presently preferred embod- 
iments have been described in detail, as will be apparent 
to those familiar with the art, certain changes and mod- 

10 ifications can be made without departing from the scope 
of the invention as defined by the following claims. 

Claims 

15 

1. In an inertial rate sensor: a vibratory rate sensing 
element, a drive circuit for applying a drive signal to 
the rate sensing element, an output terminal, a pick- 
up circuit coupled to the rate sensing element for 

20 providing a rate output signal at the output terminal 
corresponding to movement of the rate sensing el- 
ement, a memory in which compensation values are 
stored in the form of digital data, means for commu- 
nicating with an external programming computer 

25 through the output terminal to access data stored in 
the memory, a digital-to-analog converter for con- 
verting data retrieved from the memory to analog 
signals, means for calibrating the rate sensor with 
the analog signals, means for monitoring signals at 

30 different points with the rate sensor to detect the oc- 
currence of a failure, and means for applying a sig- 
nal of predetermined character to the output termi- 
nal in the event of a failure. 

35 2. The inertial rate sensor of Claim 1 including an out- 
put stage which can be selectively programmed for 
operation in a normal mode in which the rate output 
signal is passed to the output terminal, a failure 
mode in which the output terminal is held at a pre- 

40 determined voltage to indicate the occurrence of a 
failure, and a programming mode in which data can 
pass bidirectionally through the output terminal. 

3. The inertial rate sensor of Claim 1 or Claim 2 includ- 
es ing a temperature sensor for providing an analog 

temperature signal, means including an analog-to- 
1 digital converter and successive approximation log- 
ic for converting the analog temperature signal to a 
digital signal for use in addressing the memory to 
50 retrieve temperature compensation data. 

4. The inertial rate sensor of Claim 1 or Claim 2 includ- 
ing a temperature sensor for providing an analog 
temperature signal, means including an analog-to- 

55 digital converter and successive approximation log- 
ic for converting the analog temperature signal to a 
digital signal, means for applying the digital temper- 
ature signal to the digital-to-analog converter to pro- 
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vide an analog feedback signal, means for combin- 
ing the feedback signal with the signal from the tem- 
perature sensor to provide a residual error signal, 
and means for monitoring the residual error signal 
to verify the accuracy of the conversions. 5 

5. The inertial rate sensor of Claim 3 wherein the 
means for monitoring signals includes a window 
comparator for monitoring a signal in the analog-to- 
digital converter in order to detect a failure in either 10 
the analog-to-digital converter or the digital-to-ana- 
log converter. 

6. The inertial rate sensor of any of Claims 1 to 5 in- 
cluding means for permitting entry into a program- 15 
. ming mode only when the following conditions have 

all been met: the power supply voltage is raised to 
an elevated level and maintained at the elevated 
level for a predetermined period of time, a first ac- 
cess code is applied through the output terminal, 20 
and a second access code is applied to the memory 
to initiate a read/write sequence. 

7. The inertial rate sensor of any of Claims 1 to 6 
wherein data is stored in the memory in the form of 25 
digital words each of which is stored in two different 
memory locations, together with means for reading 

the data from both locations and comparing the two 
words to determine whether any corruption of data 
has occurred. 30 

8. The inertial rate sensor of Claim 7 wherein the 
means for comparing the data interprets the data 
as having a positive sign if the two words are iden- 
tical and as having a negative sign if the two words 35 
are complementary. 

9. In a method of sensing inertial rate, the steps of: 
applying a drive signal to a vibratory sensing ele- 
ment to produce oscillation, monitoring signals pro- *o 
duced by movement of the rate sensing element to 
provide a rate signal, delivering the rate signal to an 
output terminal, storing compensation values in a 
memory in the form of digital data, communicating 
with an external programming computer through the 45 
output terminal to access data stored in the memo- 
ry, converting data retrieved from the memory to an- 
alog signals, calibrating the rate sensor with the an- 
alog signals, monitoring signals at different points 
with the rate sensor to detect the occurrence of a 50 
failure, and applying a signal of predetermined 
character to the output terminal in the event of a fail- 
ure. 

10. The method of Claim 9 including the steps of selec- 55 
tively programming an output stage for operation in 

a normal mode in which the rate output signal is 
passed to the output terminal, a failure mode in 



which the output terminal is held at a predetermined 
voltage to indicate the occurrence of a failure, and 
a programming mode in which data can pass bidi- 
rectional^ through the output terminal. 

11. The method of Claim 9 or Claim 10 including the 
steps of providing an analog temperature signal, 
converting the analog temperature signal to a digital 
signal in an analog-to-digital converter and succes- 
sive approximation logic, and addressing the mem- 
ory in accordance with the digital signal to retrieve 
temperature compensation data. 

12. The method of Claim 9 or Claim 10 including the 
steps of providing an analog temperature signal, 
converting the analog temperature signal to a digital 
signal in an converting the analog temperature sig- 
nal to a digital signal in an analog-to-digital convert- 
er and successive approximation logic, applying the 
digital temperature signal to a digital-to-analog con- 
verter to provide an analog feedback signal, com- 
bining the feedback signal with the signal from the 
temperature sensor to provide a residual error sig- 
nal, and monitoring the residual error signal to verify 
the accuracy of the conversions. 

13. The method of Claim 12 wherein the residual error 
signal is monitored with a window comparator in or- 
der to verify that any conversion error is within pre- 
determined limits. 

14. The method of any of Claims 9 to 13 including the 
steps of checking for the following conditions before 
permitting entry into a programming mode: the pow- 
er supply voltage is raised to an elevated level and 
maintained at the elevated level for a predeter- 
mined period of time, a first access code is applied 
through the output terminal, and a second access 
code is applied to the memory to initiate a read/write 
sequence. 

15. The method of any of Claims 9 to 14 wherein the 
data is stored in the memory in the form of digital 
words, and including the steps of storing each of the 

7 digital words in two different memory locations, 
reading the words from the two locations, and com- 
paring the data from the two locations to determine 
whether any corruption of data has occurred. 

16. The method of Claim 15 wherein the data is inter- 
preted as having a positive sign if the two words are 
identical and as having a negative sign if the two 
words are complementary. 

17. In an inertial rate sensor: a vibratory rate sensing 
element, a drive circuit for applying a drive signal to 
the rate sensing element, an output terminal, a pick- 
up circuit coupled to the rate sensing element for 
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providing a rate signal corresponding to movement 
of the rate sensing element, a memory in which dig- 
ital data is stored, an output stage capable of oper- 
ating in a normal mode in which the rate signal is 
passed to the output terminal and in a programming 
mode in which an external computer can interface 
with the memory through the output terminal. 

1 8. The inertial rate sensor of Claim 1 7 including means 
for preventing the output stage from entering the 
programming mode unless the following conditions 
are met: the power supply voltage is raised to an 
elevated level and maintained at the elevated level 
for a predetermined period of time, a first access 
code is applied through the output terminal, and a 
second access code is applied to the memory to in- 
itiate a read/write sequence. 

19. The inertial rate sensor of Claim 17 further including 
means for monitoring signals to detect the occur- 
rence of a failure in the rate sensor, and wherein the 
output stage is also capable of operating in a failure 
mode in the which output terminal is held at a pre- 
determined voltage level in the event that a failure 
is detected. 

20. In a method of sensing inertial rate, the steps of: 
applying a drive signal to a vibratory rate sensing 
element to produce oscillation, monitoring signals 
produced by movement of the rate sensing element 
to provide a rate signal, storing digital data in a 
memory, and programming an output stage for op- 
eration either in a normal mode in which the rate 
signal is passed to the output terminal or in a pro- 
gramming mode in which an external computer can 
interface with the memory through the output termi- 
nal. 

21. The method of Claim 20 including the step of per- 
mitting the output stage to enter the programming 
mode only if the following conditions are met: the 
power supply voltage is raised to an elevated level 
and maintained at the elevated level for a predeter- 
mined period of time, a first access code is applied 
through the output terminal, and a second access 
code is applied to the memory to initiate a read/write 
sequence. 

22. The method of Claim 10 further including the steps 
of monitoring signals to detect the occurrence of a 
failure in the rate sensor, and programming the out- 
put stage to operate in a failure mode in which the 
output terminal is held at a predetermined voltage 
level in the event that a failure is detected. 

23. In an inertial rate sensor: a vibratory rate sensing 
element, a drive circuit for applying a drive signal to 
the rate sensing element, a pickup circuit coupled 



to the rate sensing element for providing a rate sig- 
nal corresponding to movement of the rate sensing 
element, a memory in which compensation data is 
stored in the form of digital words each of which is 
5 stored in two different locations, means for reading 
the data from both locations and comparing the two 
words to verify the data, means for interpreting the 
data as having a positive sign if the two words are 
identical and as having a negative sign if the two 
10 words are complementary, means for selecting a 
compensation value in accordance with the sign of 
the data, and means for combining the compensa- 
tion value with the rate signal. 

15 24. In a method of sensing inertial rate, the steps of: 
applying a drive signal to a vibratory rate sensing 
element to produce oscillation, monitoring signals 
produced by movement of the rate sensing element 
to provide a rate signal, storing compensation data 
20 in a memory in the form of digital words each of 
which is stored in two different locations, reading 
the data from both locations and comparing the two 
words to verify the data, interpreting the data as 
having a positive sign if the two words are identical 
25 and as having a negative sign if the two words are 
complementary, selecting a compensation value in 
accordance with the sign of the data, and combining 
the compensation value with the rate signal. 

30 25. In an inertial rate sensor: a vibratory rate sensing 
element, a drive circuitry for applying a drive signal 
to the rate sensing element, a pickup circuit coupled 
to the rate sensing element for providing a rate sig- 
nal corresponding to movement of the rate sensing 

35 element, a memory in which compensation values 
are stored in the form of digital data, means for con- 
verting data retrieved from the memory to analog 
compensation signals, means for adjusting the rate 
signal in accordance with the compensation sig- 

40 nals, a temperature sensor for providing an analog 
temperature signal, means including an anafog-to- 
, digital converter and successive approximation log- 
ic for converting the analog temperature signal to a 
digital signal for use in addressing the memory to 

« retrieve temperature compensation data. 

26. In a method of sensing inertial rate, the steps of: 
applying a drive signal to a vibratory rate sensing 
element to produce oscillation, monitoring signals 

50 produced by movement of the rate sensing element 
to provide a rate signal, storing compensation val- 
ues in a memory in the form of digital data, convert- 
ing data retrieved from the memory to analog com- 
pensation signals, adjusting the rate signal in ac- 

55 cordance with the compensation signals, monitor- 
ing temperature with an analog temperature sensor, 
converting an analog temperature signal to a digital 
signal, converting the analog temperature signal to 
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a digital signal, and addressing the memory in ac- 
cordance with the digital signal to retrieve temper- 
ature compensation data. 

27. In an inertial rate sensor: a vibratory rate sensing 5 
element, a drive circuit for applying a drive signal to 
the rate sensing element, a pickup circuit coupled 

to the rate sensing element for providing a rate sig- 
nal corresponding to movement of the rate sensing 
element, a temperature sensor for providing an an- 10 
alog temperature signal, means including an ana- 
log-to-digital converter and successive approxima- 
tion logic for converting the analog temperature sig- 
nal to a digital signal, a digital-to-analog converter 
for converting the digital temperature signal to an 15 
analog feedback signal, means for combining the 
feedback signal with the signal from the tempera- 
ture sensor to provide a residual error signal, and 
means for monitoring the residual error signal to 
verify the accuracy of the conversions. 20 

28. In a method of sensing inertia! rate, the steps of: 
applying a drive signal to a vibratory rate sensing 
element to produce oscillation, monitoring signals 
produced by movement of the rate sensing element 25 
to provide a rate signal, monitoring temperature 
with an analog temperature sensor, converting an 
analog temperature signal to a digital signal, con- 
verting the digital temperature signal to an analog 
feedback signal, combining the feedback signal 30 
with the signal from the temperature sensor to pro- 
vide a residua! error signal and monitoring the re- 
sidual error signal to verify the accuracy of the con- 
versions. 
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